# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=162 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 163 --- ## [Problems with Adding Field in Kibana](https://discuss.elastic.co/t/problems-with-adding-field-in-kibana/367249)
**Author:** [@Gean\_Carlos](https://discuss.elastic.co/u/Gean_Carlos)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 2:19pm UTC](https://discuss.elastic.co/t/problems-with-adding-field-in-kibana/367249 "2024-09-27T14:19:10Z")
I'm trying to group data in a table in Kibana, and when I use the "Add Field" functionality to create new fields and group the data, I notice that as I apply more groupings, the data in the table becomes smaller or disap… --- ## [Elasticsearch cluster version](https://discuss.elastic.co/t/elasticsearch-cluster-version/367243)
**Author:** [@eberg](https://discuss.elastic.co/u/eberg)\ **Replies:** 1\ **Last updated:** [September 27, 2024, 1:43pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-version/367243 "2024-09-27T13:43:09Z")
Hello I have Elasticsearch cluster with multiple nodes. I am planning on removing one node from the cluster and adding new node on a different server. My questions are as follows: All cluster nodes are running on 8.10… --- ## [If the default space is removed from the role, the elastic logo is displaying on load of dashboard and select space](https://discuss.elastic.co/t/if-the-default-space-is-removed-from-the-role-the-elastic-logo-is-displaying-on-load-of-dashboard-and-select-space/367241)
**Author:** [@tejashree](https://discuss.elastic.co/u/tejashree)\ **Replies:** 1\ **Last updated:** [September 27, 2024, 1:20pm UTC](https://discuss.elastic.co/t/if-the-default-space-is-removed-from-the-role-the-elastic-logo-is-displaying-on-load-of-dashboard-and-select-space/367241 "2024-09-27T13:20:25Z")
After login, on load of select space, the default elastic logo is getting displayed. The user is created without default space. Please let me know how to fix this issue. Version 8.14.1 --- ## [Cannot get Autodiscover conditions to work](https://discuss.elastic.co/t/cannot-get-autodiscover-conditions-to-work/367231)
**Author:** [@dailaigh](https://discuss.elastic.co/u/dailaigh)\ **Replies:** 1\ **Last updated:** [September 27, 2024, 12:17pm UTC](https://discuss.elastic.co/t/cannot-get-autodiscover-conditions-to-work/367231 "2024-09-27T12:17:37Z")
I have a situation where I am trying to get filebeat-7.16.2 to ship logs from three separate docker containers on a single host. I am trying to use autodiscover to launch different configurations for the logs from each … --- ## [Alerts issue](https://discuss.elastic.co/t/alerts-issue/367182)
**Author:** [@tapiojaa](https://discuss.elastic.co/u/tapiojaa)\ **Replies:** 2\ **Last updated:** [September 27, 2024, 11:55am UTC](https://discuss.elastic.co/t/alerts-issue/367182 "2024-09-27T11:55:28Z")
I'm trying to configure an alert that when certain word is found, email is sent. Email connector is configured and test email works. My rule looks like this: { "query":{ "match" : { "message": "client … --- ## [Logstash javapipeline error=\> (OpenTimeout) execution expired](https://discuss.elastic.co/t/logstash-javapipeline-error-opentimeout-execution-expired/365660)
**Author:** [@San9](https://discuss.elastic.co/u/San9)\ **Replies:** 8\ **Last updated:** [September 27, 2024, 11:15am UTC](https://discuss.elastic.co/t/logstash-javapipeline-error-opentimeout-execution-expired/365660 "2024-09-27T11:15:20Z")
Hi Teams. The problem is in the pipeline. I noticed that data periodically stops flowing for one index. I checked and after a certain time the port stops "listening". At the input, TCP is listening, I saw this message … --- ## [\[ERROR\]\[o.e.x.m.e.l.LocalExporter\] \[my-cluster\] failed to delete indices org.elasticsearch.index.IndexNotFoundException: no such index \[.monitoring-kibana-7-YYYY.MM.DD\]](https://discuss.elastic.co/t/error-o-e-x-m-e-l-localexporter-my-cluster-failed-to-delete-indices-org-elasticsearch-index-indexnotfoundexception-no-such-index-monitoring-kibana-7-yyyy-mm-dd/367239)
**Author:** [@mwitsas](https://discuss.elastic.co/u/mwitsas)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 10:58am UTC](https://discuss.elastic.co/t/error-o-e-x-m-e-l-localexporter-my-cluster-failed-to-delete-indices-org-elasticsearch-index-indexnotfoundexception-no-such-index-monitoring-kibana-7-yyyy-mm-dd/367239 "2024-09-27T10:58:29Z")
My cluster is raising the following error every day - this is a single node cluster using all default settings. I have enabled stack monitoring in Kibana. Looking to understand the cause an stop this error from being ra… --- ## [sql Pagination Query](https://discuss.elastic.co/t/sql-pagination-query/367237)
**Author:** [@mengpeiyao](https://discuss.elastic.co/u/mengpeiyao)\ **Replies:** 1\ **Last updated:** [September 27, 2024, 10:56am UTC](https://discuss.elastic.co/t/sql-pagination-query/367237 "2024-09-27T10:56:09Z")
When using SQL for queries, it is not allowed to use 'Limit 10 OFFSET 20' in MySQL; Or "Limit 20, 10; Is that so? --- ## [Issue with labels in MSSQL Curated Dashboards](https://discuss.elastic.co/t/issue-with-labels-in-mssql-curated-dashboards/367235)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 10:47am UTC](https://discuss.elastic.co/t/issue-with-labels-in-mssql-curated-dashboards/367235 "2024-09-27T10:47:09Z")
Hi Team, We are using Elastic MSSQL integration (ELK Version 8.13.4) to pull error logs. The elastic agent is installed on the Windows node running the MSSQL service and is managed by fleet. The curated log dashboard do… --- ## [No matching index template for data data stream \[\\]](https://discuss.elastic.co/t/no-matching-index-template-for-data-data-stream-template-name/367234)
**Author:** [@developer\_cloud](https://discuss.elastic.co/u/developer_cloud)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 10:32am UTC](https://discuss.elastic.co/t/no-matching-index-template-for-data-data-stream-template-name/367234 "2024-09-27T10:32:56Z")
Hello, I'm encountering the above error as part of the error below. Connection marked as failed because the onConnect callback failed: error loading template: failed to put data stream: could not put data stream: 400 B… --- ## [No search context found for id \[71\] in \_search pit Api](https://discuss.elastic.co/t/no-search-context-found-for-id-71-in-search-pit-api/367226)
**Author:** [@Maulik\_Singhal](https://discuss.elastic.co/u/Maulik_Singhal)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 9:58am UTC](https://discuss.elastic.co/t/no-search-context-found-for-id-71-in-search-pit-api/367226 "2024-09-27T09:58:45Z")
Hello All, I have been trying to use pit with \_search api. After receiving the pit from a put request on the index. When I tried using this pit to fetch records with size = 2 in /\_search api received this error : "No sea… --- ## [Ignore french ellision on highlight](https://discuss.elastic.co/t/ignore-french-ellision-on-highlight/367219)
**Author:** [@Srikanth\_V](https://discuss.elastic.co/u/Srikanth_V)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 8:27am UTC](https://discuss.elastic.co/t/ignore-french-ellision-on-highlight/367219 "2024-09-27T08:27:31Z")
Hello, I am currently using elasticsearch 7.x and when searching for a term "exécution" using simple\_query\_string -\> the elasticsearch highlight returns -\> l'exécution, is there a possibility via elasticsearch that we ca… --- ## [Kibana error after upgrade to 8.13.2](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-8-13-2/359016)
**Author:** [@shailendra1](https://discuss.elastic.co/u/shailendra1)\ **Replies:** 4\ **Last updated:** [September 27, 2024, 6:45am UTC](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-8-13-2/359016 "2024-09-27T06:45:26Z")
Hello Team, i recently upgraded by kibana instance to 8.13.2 using zip bundle after upgrades i am seeking a pop-up error alerts in UI just after logging in kibana dashboard. is anyone can help to let me know this cause… --- ## [Unable to configure Elasticsearch to collect log from Openshift cluser](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-to-collect-log-from-openshift-cluser/367212)
**Author:** [@mbalel](https://discuss.elastic.co/u/mbalel)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 6:27am UTC](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-to-collect-log-from-openshift-cluser/367212 "2024-09-27T06:27:41Z")
Hello, I have a problem connection our Openshift cluster to the Elasticsearch. I have tried with elasticsearch as an Input configuration option but failed to configure it I guess. The error from elastic side is: 2024-09-… --- ## [Kibana and Logstash are stopped automatically after some time](https://discuss.elastic.co/t/kibana-and-logstash-are-stopped-automatically-after-some-time/367210)
**Author:** [@Chinna\_Venkata\_Reddy](https://discuss.elastic.co/u/Chinna_Venkata_Reddy)\ **Replies:** 0\ **Last updated:** [September 27, 2024, 5:43am UTC](https://discuss.elastic.co/t/kibana-and-logstash-are-stopped-automatically-after-some-time/367210 "2024-09-27T05:43:36Z")
I have installed the Elastic search, Kibana and Logstash to integrate with my application. I installed Kibana and Logstash as windows services by using winsw as mentioned below Kibana : Logstash: With this I can… --- ## [ELK Multi node Cluster using docker compose](https://discuss.elastic.co/t/elk-multi-node-cluster-using-docker-compose/366149)
**Author:** [@sarathrock](https://discuss.elastic.co/u/sarathrock)\ **Replies:** 4\ **Last updated:** [September 27, 2024, 5:15am UTC](https://discuss.elastic.co/t/elk-multi-node-cluster-using-docker-compose/366149 "2024-09-27T05:15:44Z")
iam trying to setup ELK Multi node Cluster using docker compose Server details Master: 10.100.10.01 Node-1: 10.100.10.02 node-2: 10.100.10.03 Can you pls help me --- ## [Elasticsearch is not getting started and throwing same ‘operation not permitted’ error](https://discuss.elastic.co/t/elasticsearch-is-not-getting-started-and-throwing-same-operation-not-permitted-error/367202)
**Author:** [@bshiwanand](https://discuss.elastic.co/u/bshiwanand)\ **Replies:** 2\ **Last updated:** [September 27, 2024, 4:50am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-getting-started-and-throwing-same-operation-not-permitted-error/367202 "2024-09-27T04:50:06Z")
We are deploying the Elasticsearch on containerized env. with multi cluster facing the below issue. “/home/jboss/gpp/profiles/GPPE\_EG\_EUS\_HV06/config/esserver11/elasticsearch.keystore.tmp” operation not permitted Pl… --- ## [Elasticsearch Index Field Deletion Issue with Logstash](https://discuss.elastic.co/t/elasticsearch-index-field-deletion-issue-with-logstash/367191)
**Author:** [@Md\_Habibullah\_Howlad](https://discuss.elastic.co/u/Md_Habibullah_Howlad)\ **Replies:** 0\ **Last updated:** [September 26, 2024, 2:19pm UTC](https://discuss.elastic.co/t/elasticsearch-index-field-deletion-issue-with-logstash/367191 "2024-09-26T14:19:38Z")
Hello everyone, I’m new to the ELK stack and need help with an issue regarding field deletion in Elasticsearch. I have a source table with 10 records that I want to reflect in Elasticsearch. I'm using Logstash to pull … --- ## [The \`docker.elastic.co\` web UI does not seem to show all the tags of the Elastic Package Registry](https://discuss.elastic.co/t/the-docker-elastic-co-web-ui-does-not-seem-to-show-all-the-tags-of-the-elastic-package-registry/366177)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 2\ **Last updated:** [September 27, 2024, 2:39am UTC](https://discuss.elastic.co/t/the-docker-elastic-co-web-ui-does-not-seem-to-show-all-the-tags-of-the-elastic-package-registry/366177 "2024-09-27T02:39:48Z")
The https://www.docker.elastic.co/ web UI does not seem to show all the tags of the Elastic Package Registry. Apparently at package-registry/distribution | Docker @ Elastic , there are separate web pages showing the sep… --- ## [Kibana log in, Is this behavior in line with expectations?](https://discuss.elastic.co/t/kibana-log-in-is-this-behavior-in-line-with-expectations/367173)
**Author:** [@rangerforce007](https://discuss.elastic.co/u/rangerforce007)\ **Replies:** 2\ **Last updated:** [September 27, 2024, 1:46am UTC](https://discuss.elastic.co/t/kibana-log-in-is-this-behavior-in-line-with-expectations/367173 "2024-09-27T01:46:46Z")
Two different elasticsearch instances use the elastic account to log in to the kibana page of each instance in the same browser. After the second login succeeds, the previous one will be automatically logged out. Is th… --- ## [Failure upon install local java plugins in logstash-wolfi](https://discuss.elastic.co/t/failure-upon-install-local-java-plugins-in-logstash-wolfi/365367)
**Author:** [@ahmadabulaban1993](https://discuss.elastic.co/u/ahmadabulaban1993)\ **Replies:** 1\ **Last updated:** [September 27, 2024, 1:24am UTC](https://discuss.elastic.co/t/failure-upon-install-local-java-plugins-in-logstash-wolfi/365367 "2024-09-27T01:24:31Z")
Versions 8.15.0 based on wolfi (docker.elastic.co/logstash/logstash-wolfi:8.15.0) Describe the issue : I've some custom plugins built using java and currently using logstash v8.14.3. Noticed that logstash 8.15.0 is re… --- ## [Need help in writing a multi condition Query](https://discuss.elastic.co/t/need-help-in-writing-a-multi-condition-query/367167)
**Author:** [@vkrishna](https://discuss.elastic.co/u/vkrishna)\ **Replies:** 10\ **Last updated:** [September 26, 2024, 7:30pm UTC](https://discuss.elastic.co/t/need-help-in-writing-a-multi-condition-query/367167 "2024-09-26T19:30:08Z")
Hi Team, Need help in writing JAVA API query. These are my elastic documents. { "number":1, "effective\_date":"2024-10-01T00:00:00.000Z" } { "number":2, "effective\_date":"2024-10-02T00:00:00.000Z" } { "number":3, … --- ## [Understanding - Basics about Agents/Integrations](https://discuss.elastic.co/t/understanding-basics-about-agents-integrations/366966)
**Author:** [@achim](https://discuss.elastic.co/u/achim)\ **Replies:** 1\ **Last updated:** [September 26, 2024, 3:57pm UTC](https://discuss.elastic.co/t/understanding-basics-about-agents-integrations/366966 "2024-09-26T15:57:23Z")
Hello I am looking for some information to understand the 'basics' about Agent Policies and Integrations I inherited an ELASTIC environment and wanted to understand why the "Windows" integration is included in all agen… --- ## [Which configuration to use for Filbeat and Kubernetes container or pods?](https://discuss.elastic.co/t/which-configuration-to-use-for-filbeat-and-kubernetes-container-or-pods/365283)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 4\ **Last updated:** [September 26, 2024, 3:53pm UTC](https://discuss.elastic.co/t/which-configuration-to-use-for-filbeat-and-kubernetes-container-or-pods/365283 "2024-09-26T15:53:53Z")
Hi when configuring Filbeat, it seems the default prefered method in the docs is to use /var/log/containers But if I understand correctly, it's better to setup the /var/log/pods folder. Since Kubernetes rotates it's log… --- ## [My reindex task disappears somehow after it is created](https://discuss.elastic.co/t/my-reindex-task-disappears-somehow-after-it-is-created/367198)
**Author:** [@jdhao](https://discuss.elastic.co/u/jdhao)\ **Replies:** 0\ **Last updated:** [September 26, 2024, 3:42pm UTC](https://discuss.elastic.co/t/my-reindex-task-disappears-somehow-after-it-is-created/367198 "2024-09-26T15:42:40Z")
Hi, I am using Elasticsearch cluster from the Elastic cloud. The version is 8.10. I have this strange issue occured. We use the reindex API with wait\_for\_completion=False to create a reindex task. In the re… --- ## [No response on sales team](https://discuss.elastic.co/t/no-response-on-sales-team/367190)
**Author:** [@martijnomoda](https://discuss.elastic.co/u/martijnomoda)\ **Replies:** 1\ **Last updated:** [September 26, 2024, 2:33pm UTC](https://discuss.elastic.co/t/no-response-on-sales-team/367190 "2024-09-26T14:33:45Z")
I have tried several times to contact the sales team for an upgrade to platinum subscription on-premise, but I got no response. I filled in the form repeatedly and even opened a support ticket, but apparently nobody want… --- ## [Epoch time fractional number](https://discuss.elastic.co/t/epoch-time-fractional-number/366719)
**Author:** [@miiroslavkardos](https://discuss.elastic.co/u/miiroslavkardos)\ **Replies:** 4\ **Last updated:** [September 26, 2024, 1:15pm UTC](https://discuss.elastic.co/t/epoch-time-fractional-number/366719 "2024-09-26T13:15:36Z")
Hello guys, I have following epoch timestamp : @timestamp":1726149789.77797 And i am using ruby { code =\> ' t = Time.at(event.get("@timestamp").to\_f \* 1000) event.set("@timestamp", t.st… --- ## [Fleet agent installation failed: x509 error with --insecure](https://discuss.elastic.co/t/fleet-agent-installation-failed-x509-error-with-insecure/366259)
**Author:** [@kev24](https://discuss.elastic.co/u/kev24)\ **Replies:** 5\ **Last updated:** [September 26, 2024, 1:09pm UTC](https://discuss.elastic.co/t/fleet-agent-installation-failed-x509-error-with-insecure/366259 "2024-09-26T13:09:33Z")
Hello everyone, i'm having some trouble installing a fleet server but there's a twist to it: I'm running Elastic 8.4 installed via Elastic Operator on Kubernetes and I'm not using a certificate authority, all is being d… --- ## [How to Restrict User Access to Specific Dashboards Only (Not All) in Kibana](https://discuss.elastic.co/t/how-to-restrict-user-access-to-specific-dashboards-only-not-all-in-kibana/367101)
**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\ **Replies:** 5\ **Last updated:** [September 26, 2024, 1:02pm UTC](https://discuss.elastic.co/t/how-to-restrict-user-access-to-specific-dashboards-only-not-all-in-kibana/367101 "2024-09-26T13:02:01Z")
Hello Team Version - 8.14 I have created 10 dashboards under my admin account in Kibana. Recently, I added a new user with admin rights for a different team member. However, I want to restrict this user’s access to onl… --- ## [Unable to see combined auditbeat, filebeat indicies in elastic](https://discuss.elastic.co/t/unable-to-see-combined-auditbeat-filebeat-indicies-in-elastic/367080)
**Author:** [@bhautik](https://discuss.elastic.co/u/bhautik)\ **Replies:** 1\ **Last updated:** [September 26, 2024, 1:01pm UTC](https://discuss.elastic.co/t/unable-to-see-combined-auditbeat-filebeat-indicies-in-elastic/367080 "2024-09-26T13:01:51Z")
I am using filebeat, and auditbeat to collect the log and send it to Elastic, here is my config file filebeat.inputs: - type: filestream id: auditbeat fields: auditbeat: true paths: - /var/log/… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=161) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=163)